|
Description
|
|
A weakness and two vulnerabilities have been reported in Pulse Pro CMS, which can be exploited by malicious people to disclose sensitive information and conduct cross-site scripting attacks.
1) The application stores backups with predictable file names inside the data/backups directory, which can be exploited to disclose sensitive information by downloading a file.
This is related to:
SA44315
2) Input passed to the "d" parameter in index.php (when "p" is set to "blocks") and the "post_id" parameter in index.php (when "p" is set to "edit-post") is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
The vulnerabilities are reported in version 1.7.2. Other versions may also be affected.
|
